MCMC: Only eight data types required from telcos in Mobile Phone Data collection initiative

The Star

a day ago

The data will be collected and stored on premise in MCMC for three years. — FAIHAN GHANI/The Star
CYBERJAYA: Mobile network operators are only required to provide eight types of data in the Mobile Phone Data (MPD) collection initiative, according to the Malaysian Communications and Multimedia Commission (MCMC).
"No personally identifiable information such as IC number, name or phone number are collected," said MCMC deputy managing director Datuk Zurkarnain Mohd Yasin during a media briefing today (June 9).
He explained that the data collected include MSISDN (mobile station international subscriber directory number), which MCMC also termed as "anonymised subscribers' identifier"; unique ID; and the longitude as well as longitude data of telco towers.
Also collected are data on the date and time of each transaction; data type (call detail records or Internet protocol detail records); type of network (2G, 4G or 5G) and mobile country code (country identifier to distinguish between local or international subscriptions).
The data will be collected and stored on premise in MCMC for three years, he added.
Zurkarnain also explained that the MPD is currently in pilot phase and is expected to continue until 2026: "We have started in Cyberjaya and Melaka. Then the Department of Statistics Malaysia (DOSM) will decide how it goes after that."
He added that anonymised MPD is not classified as a form of personal data under the Personal Data Protection Act 2010 (PDPA) because "it cannot be used to identify or trace individuals either directly or indirectly"; hence anonymised MPD falls outside the scope of PDPA.
"We have no intentions to get information on individual whereabouts. MPD is considered as a new form of gathering statistical data. Previously, we had to rely on surveys or census," he said.
On why it's crucial, Zurkarnain said it's part of the digital transformation agenda to rely on big data and analytics for a more targeted approach in policy making. The initiative is focusing on gathering official statistics in two key areas namely ICT and tourism.
Last week, users raised concerns over data privacy and security after reports about the MPD collection initiative emerged. Commission member Derek Fernandez said claims about user personal data being collected are false.
"The circular sent to the mobile network operators showed that we have requested for the data to be anonymised. We do not want any personal data," he said, adding no third-party contractor has been appointed for the initiaitve.
Zurkarnain confirmed that a fine on mobile network operators for non-compliance is needed as part of a requirement to support the initiative: "Everybody has to play a role in national development. We can talk about wanting to implement digital transformation using big data but what if there is no data and the data owner does not want to cooperate, then where do we move from there?"
He added that all mobile network operators have agreed to comply. DOSM will process and analyse the data for publication.
When asked if users can opt out of the initiative, Zurkarnain said: "It is a Cabinet decision, what we are doing is for national development. This is part of a regulatory requirement that we have asked the operators to comply."
Fernandez added that it is stipulated in the Communications and Multimedia Act 1998 for MCMC to gather relevant data to improve infrastructure: "We do it within the benchmarks of international standards and practices."